From: "Maurice Lucas" <[EMAIL PROTECTED]>

Hello,

I have a problem with both 3.1.0-rc1 and 3.1.0-rc2.

Some off my mail is checked by SA and marked as spam but gets an extra LF causing the rest of my tools to ignore the X-Spam-Status header field.

This is a sample message, I do have more for developers. This problem isn't occuring on every email but on a few a day.

------- Start sample -------
Received: from MUNGLED ([MUNGLED]) by MUNGLED with Microsoft SMTPSVC(6.0.3790.1830); Tue, 13 Sep 2005 00:45:20 +0200
Received:  (qmail 1327 invoked from network); 12 Sep 2005 22:45:19 -0000
Received: from localhost by MUNGLED with SpamAssassin (version 3.1.0-rc2); Tue, 13 Sep 2005 00:45:19 +0200
Content-class: urn:content-classes:message
Subject: ****SPAM(43.8)**** Viagra letter for our subscribers
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 13 Sep 2005 09:30:55 +0200
Message-ID: <[EMAIL PROTECTED]>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: ****SPAM(43.8)**** Viagra letter for our subscribers
Thread-Index: AcW366dzQ7Zbq0hdSEuQ1d1ysB6ADA==
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
From: <[EMAIL PROTECTED]>
To: =?iso-8859-1?Q?Sjarlie_Dresm=E9?= <[EMAIL PROTECTED]>

X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.0-rc2 (2005-08-27) on=20
capella.taos-it.nl
X-Spam-Level: *******************************************

THAT may explain what the mad Russian is doing with these high scoring spams.
He found a hole that affects systems that use the X-Spam-Flag for something
important. (I don't. I route via the spam message in the subject.)

I wonder if he is ending the line with <lf><cr><lf> to create that confusion.
Supposedly a lone <lf> not preceded by a <cr> is not really a newline for
email. But SpamAssassin, thinking 'ix-ishly, does. If so I gotta give the
guy credit for being passably clever.

{^_^} Joanne

Reply via email to